Puppet Class: psick::puppet::pe_code_manager

Defined in:
manifests/puppet/pe_code_manager.pp

Overview

This class configures PE Code Manager for automatic deployments

Parameters:

  • generate_ssh_keys (Boolean) (defaults to: true)
  • deploy_ssh_private_key_path (String) (defaults to: '/etc/puppetlabs/ssh/id-control_repo.rsa')
  • deploy_ssh_private_source (Optional[String]) (defaults to: undef)
  • deploy_ssh_public_key_path (String) (defaults to: '/etc/puppetlabs/ssh/id-control_repo.rsa.pub')
  • deploy_ssh_public_source (Optional[String]) (defaults to: undef)
  • pe_user (Optional[String]) (defaults to: undef)
  • pe_password (Optional[String]) (defaults to: undef)
  • pe_email (String) (defaults to: 'root@localhost')
  • deploy_comment (Optional[String]) (defaults to: undef)
  • deploy_user (String) (defaults to: 'root')
  • puppet_user (String) (defaults to: 'pe-puppet')
  • puppet_group (String) (defaults to: 'pe-puppet')
  • puppet_user_home (Optional[String]) (defaults to: undef)
  • lifetime (String) (defaults to: '5y')
  • manage (Boolean) (defaults to: $psick::manage)
  • noop_manage (Boolean) (defaults to: $psick::noop_manage)
  • noop_value (Boolean) (defaults to: $psick::noop_value) 


3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
 
# File 'manifests/puppet/pe_code_manager.pp', line 3

class psick::puppet::pe_code_manager (
  Boolean $generate_ssh_keys                  = true,
  String $deploy_ssh_private_key_path         = '/etc/puppetlabs/ssh/id-control_repo.rsa',
  Optional[String] $deploy_ssh_private_source = undef,
  String $deploy_ssh_public_key_path          = '/etc/puppetlabs/ssh/id-control_repo.rsa.pub',
  Optional[String] $deploy_ssh_public_source  = undef,
  Optional[String] $pe_user                   = undef,
  Optional[String] $pe_password               = undef,
  String $pe_email                            = 'root@localhost',
  Optional[String] $deploy_comment            = undef,
  String $deploy_user                         = 'root',
  String $puppet_user                         = 'pe-puppet',
  String $puppet_group                        = 'pe-puppet',
  Optional[String] $puppet_user_home          = undef,
  String $lifetime                            = '5y',
  Boolean $manage                  = $psick::manage,
  Boolean $noop_manage             = $psick::noop_manage,
  Boolean $noop_value              = $psick::noop_value,
) {
  if $manage {
    if $noop_manage {
      noop($noop_value)
    }

    if $pe_user and $pe_password {
      rbac_user { $pe_user:
        ensure       => 'present',
        name         => $pe_user,
        display_name => 'Puppet code deploy user',
        email        => $pe_email,
        password     => $pe_password,
        roles        => ['Code Deployers'],
        before       => Psick::Puppet::Access[$pe_user],
      }
      psick::puppet::access { $pe_user:
        pe_password => $pe_password,
        run_as_user => $deploy_user,
        lifetime    => $lifetime,
      }
    }

    if $generate_ssh_keys {
      file { '/etc/puppetlabs/ssh':
        ensure => directory,
        path   => '/etc/puppetlabs/ssh',
        owner  => $puppet_user,
      }

      $real_deploy_user_home = $deploy_user ? {
        'root'  => '/root',
        default => "/home/${deploy_user}",
      }

      psick::openssh::keygen { $deploy_user:
        comment => $deploy_comment,
        before  => [File[$deploy_ssh_private_key_path],File[$deploy_ssh_public_key_path]],
      }

      file { $deploy_ssh_private_key_path:
        ensure => file,
        owner  => $puppet_user,
        group  => $puppet_group,
        mode   => '0600',
        source => pick($deploy_ssh_private_source,"file://${real_deploy_user_home}/.ssh/id_rsa"),
      }
      file { $deploy_ssh_public_key_path:
        ensure => file,
        owner  => $puppet_user,
        group  => $puppet_group,
        mode   => '0600',
        source => pick($deploy_ssh_public_source,"file:///${real_deploy_user_home}/.ssh/id_rsa.pub"),
      }
    }

    # TODO Automate Upload of ssh public key to gitlab
    #  psick_profile::gitlab::deploy_key { :
    #    sshkey => $deploy_ssh_public_key
    #  }
  }
}